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Claims: 

1. A method of securely initialising subscriber and security data in a mobile 
routing system when the subscribers are also subscribers of a radio communication 

5 network, the method comprising: 

within the mobile routing system, authenticating subscribers to the mobile 
routing system using an authentication procedure defined for the radio communication 
network, collecting subscriber information from relevant nodes of the radio network, 
and agreeing upon keys by which further communications between the subscribers and 
10 the mobile routing system can take place; and 

using said subscriber information and keys in the provision of mobility services 
to subscriber mobile nodes and correspondent nodes. 

2. A method according to claim 1 and comprising transporting messages associated 
15 with said step of authenticating subscribers to the mobile routing system, between the 

mobile node used by a subscriber and an authentication server of the subscriber's home 
network, via a mobility server. 

3. A method according to claim 2 and comprising collecting subscriber information 
20 from relevant nodes of the mobile network at the mobility server, and receiving a shared 

secret or secrets from the authentication server following completion of the re-run 
authentication procedure. 

4. A method according to claim 3 and comprising sending session keys, agreed 
25 upon during the re-run authentication procedure, from the authentication server to the 

mobility server. 

5. A method according to any one of claims 2 to 4, wherein the mobile routing 
system is a MobilelP based system, and the mobility server is a Home Agent 

30 

6. A method according to any one of claims 2 to 4, wherein the mobile routing 
system is a HIP based system and the mobility server is a Forwarding Agent. 
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7. A method according to any one of the preceding claims, wherein said 
authentication procedure is the Authentication and Key Agreement procedure. 

8. A method according to any one of the preceding claims, wherein the collected 
5 subscriber information comprises one or more of the following: 

the name and postal address of the subscriber; 

the telephone number associated with the subscriber, 

the existing Fully Qualified Domain Name for the subscriber; and 

the status of any mobility services established earlier for the subscriber. 

10 

9. A method of operating a mobile node for use in a mobile radio communication 
system, the method comprising: 

initiating an authentication procedure defined for the radio communication 
network, for the purpose of authenticating the mobile node to a mobile routing system, 
15 and conducting said procedure with an authentication server via a mobility server of the 
mobile routing system. 

10. A method of operating a mobility server of a mobile routing system, the method 
comprising: 

20 relaying messages associated with an authentication procedure, between a 

mobile node and an authentication node; 

following completion of said procedure, receiving a shared secret from the 

authentication server, and collecting subscriber information from the authentication 

server and/or other network nodes; and 
25 using said subscriber information and keys in the provision of mobility services 

to subscriber mobile nodes. 

11. A method of operating an authentication server of a mobile radio 
communication network, the method comprising; 

30 conducting an authentication procedure with a mobile node via a mobility 

server; and 

sending a shared secret resulting from said procedure to said mobility server. 



